Supermarkets were described as still adapting to the threat of cyberattacks, raising questions about their preparedness for a crisis.